[clamav-users] How to find string for a signature?

2017-10-20 Thread kristen R
List, I just received an email from ncas.us-cert.gov that was caught by clamd reporting PUA.Win.Trojan.Xored-1 signature. This email is from the US Department of Homeland Security. I suppose this is a case of a false positive. How does one find the string triggering this event that I might know

Re: [clamav-users] ClamAV can't scan DVD-size ISO files

2017-09-12 Thread kristen R
On 9/12/17 9:44 PM, Al Varnell wrote: > >> On Sep 12, 2017, at 10:42 PM, kristen R wrote: >>> On 9/12/17 7:50 PM, Paul Kosinski wrote: >>> Clamscan read the entire ISO, but didn't scan any of it! >>> I thought 21st century so

Re: [clamav-users] ClamAV can't scan DVD-size ISO files

2017-09-12 Thread kristen R
On 9/12/17 7:50 PM, Paul Kosinski wrote: > Clamscan read the entire ISO, but didn't scan any of it! > I thought 21st century software was finally in the 64-bit era. > > --- > > ~/Downloads/Linux/Knoppix> ls -l

Re: [clamav-users] Error with ClamAv

2017-08-01 Thread Kristen R
> On Jul 31, 2017, at 11:56 PM, Ravi Raj wrote: > > Hi Al > > As per your advice I have made the screen-shots available on Dropbox, the > web-links are as given below: > > Note: You may want to view them in the order given below > >

Re: [clamav-users] Mirror problem

2017-04-20 Thread Kristen R.
On 4/20/17 7:42 AM, Dennis Peterson wrote: > > Anyone else seeing this? > > Sat Apr 1 14:02:39 2017 -> Trying host db.us.clamav.net > (209.198.147.20)... Sat Apr 1 14:03:09 2017 -> Can't connect to > port 80 of host db.us.clamav.net (IP: 209.198.147.20) Mon Apr 3 > 08:02:39 2017 -> Can't

Re: [clamav-users] Installing Clamav in WAMP

2016-10-26 Thread Kristen R
On 10/26/16 7:48 AM, Karthick Siva wrote: > Dear Team, > > Hope this email finds you well. > > I'm facing an issue while doing setup for clamav in PHP/wamp. I installed > - clamav-0.99.2-win32.msi and no idea how to configure with WAMP. > > Can you please suggest us how to do the

Re: [clamav-users] ClamAV+exim: scanner finds not a single malware

2016-05-29 Thread kristen R
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/28/16 6:46 PM, Joel Esler (jesler) wrote: > A. I wish I had a fan club B. Thank you for your input. C. > We'll do better. > > -- Joel Esler Manager, Talos Group It should be obvious although not mentioned that everyone who uses clamav is your

Re: [clamav-users] Certificate error downloading clamav-0.99.2

2016-05-11 Thread Kristen R
On 5/11/16 5:40 PM, Jason Englander wrote: > On Wed, 11 May 2016, Kristen R wrote: > >> Also noticed after downloading clamav-0.99.2.tar.gz and checking against >> the provided signature file the following: >> >> # gpg --verify clamav-0.99.2.tar.gz.sig clamav-0.99.2.

Re: [clamav-users] Certificate error downloading clamav-0.99.2

2016-05-11 Thread Kristen R
On 5/11/16 12:12 PM, Kristen R wrote: > List, > > Knowing there is a new version of clamav out I have gone to download it. > But I run into an error I think should be made known. Below is the error: > > # wget https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz &g

Re: [clamav-users] Certificate error downloading clamav-0.99.2

2016-05-11 Thread Kristen R
On 5/11/16 12:16 PM, Yuri Voinov wrote: > > This is because of clamav is behind CF. True > > 12.05.16 2:12, Kristen R ?: >> List, > >> Knowing there is a new version of clamav out I have gone to download it. >> But I run into an error I think should

[clamav-users] Certificate error downloading clamav-0.99.2

2016-05-11 Thread Kristen R
List, Knowing there is a new version of clamav out I have gone to download it. But I run into an error I think should be made known. Below is the error: # wget https://www.clamav.net/downloads/production/clamav-0.99.2.tar.gz --2016-05-11 12:08:04--

Re: [clamav-users] email error submitting a virus sample

2016-02-27 Thread Kristen R
> On Feb 27, 2016, at 6:09 PM, Al Varnell wrote: > > I understand SHA-256 is preferred, but MD-5 will also work. > > Submit them back here. > > -Al- $ openssl dgst -sha256 invoice_SCAN_fGYbuu.zip SHA256(invoice_SCAN_fGYbuu.zip)=